jose-jwt

Javascript Object Signing and Encryption (JOSE), JSON Web Token (JWT), JSON Web Encryption (JWE) and JSON Web Key (JWK) Implementation for .NET Ultimate Javascript Object Signing and Encryption (JOSE), JSON Web Token (JWT), JSON Web Encryption (JWE) and JSON Web Key (JWK) Implementation for .NET and .NET Core. Minimallistic. Zero-dependency. Full suite of signature and encryption algorithms. Supports generating, decoding, encryption and compression of JSON Web Tokens. Full-blown support for JSON Web Keys (RFC 7517) and two way bridging with .NET core cryptography. JSON parsing agnostic. Supports two-phase validation. FIPS compliant. Unencoded payload and detached content support (RFC 7797). JSON Web Encryption (JWE, RFC 7516) support. Cross compatible with all major operating systems - Windows, Linux, MacOS and FreeBSD. Supported algorithms Signing: - HMAC signatures with HS256, HS384 and HS512. - ECDSA signatures with ES256, ES384 and ES512. - RSASSA-PKCS1-V1_5 signatures with RS256, RS384 and RS512. - RSASSA-PSS signatures (probabilistic signature scheme with appendix) with PS256, PS384 and PS512. - NONE (unprotected) plain text algorithm without integrity protection Encryption: - RSAES OAEP 256 384 512 encryption with A128CBC-HS256, A192CBC-HS384, A256CBC-HS512, A128GCM, A192GCM, A256GCM - RSAES OAEP encryption with A128CBC-HS256, A192CBC-HS384, A256CBC-HS512, A128GCM, A192GCM, A256GCM - RSAES-PKCS1-V1_5 encryption with A128CBC-HS256, A192CBC-HS384, A256CBC-HS512, A128GCM, A192GCM, A256GCM - Direct symmetric key encryption with pre-shared key A128CBC-HS256, A192CBC-HS384, A256CBC-HS512, A128GCM, A192GCM and A256GCM - A128KW, A192KW, A256KW encryption with A128CBC-HS256, A192CBC-HS384, A256CBC-HS512, A128GCM, A192GCM and A256GCM - A128GCMKW, A192GCMKW, A256GCMKW encryption with A128CBC-HS256, A192CBC-HS384, A256CBC-HS512, A128GCM, A192GCM and A256GCM - ECDH-ES encryption with A128CBC-HS256, A128GCM, A192GCM, A256GCM - ECDH-ES+A128KW, ECDH-ES+A192KW, ECDH-ES+A256KW encryption with A128CBC-HS256, A128GCM, A192GCM, A256GCM - PBES2-HS256+A128KW, PBES2-HS384+A192KW, PBES2-HS512+A256KW with A128CBC-HS256, A192CBC-HS384, A256CBC-HS512, A128GCM, A192GCM, A256GCM Compression: - DEFLATE compression RFC 7797: - Unencoded payload - Detached content RFC 7516: - JSON Web Encryption (JWE) support JSON Web Key (RFC 7517): - RSA, EC, oct keys - X509 Chains, SHA1 & SHA2 thumbprints

Latest 5.3.0NuGet

Health Score Breakdown

Maintainerscaution

Only one account has registry publishing access, which leaves a thin publishing base. The linked repository is user-owned rather than organization-backed, so no compensating organizational backing is shown.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months. Although a recent release exists, the lack of current source activity raises maintenance risk.

Repo toolingcaution

The repository reports no build tooling and no security scanning tools. For a cryptographic library, the absence of visible security scanning is a meaningful transparency and upkeep gap.

Security policycaution

The repository has no security policy. That makes vulnerability reporting and response expectations less clear for a security-sensitive package.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous sinks or audit findings, but all five action references are unpinned. This is a workflow hygiene concern rather than a severe risk because no untrusted workflow path was detected.

View all 14 health checks

Direct Dependencies

Dependency	Last Release	Score
netstandard.library Version [1.6.1, )	—	—
newtonsoft.json Version [13.0.1, )	—	—
system.io.compression Version [4.3.0, )	—	—
system.runtime.interopservices Version [4.3.0, )	—	—
system.runtime.serialization.primitives Version [4.3.0, )	—	—

View All 10 Dependencies